Skip to content
OpenAdvisories
Unscored DSA-2164-1 1 CVE

shadow - missing input sanitization

Published Feb 16, 2011 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 shadow 1:4.1.4.2+svn3283-2+squeeze1

Vulnerabilities 1

  • Unscored —

    Multiple CRLF injection vulnerabilities in (1) chfn and (2) chsh in shadow 1:4.1.4 allow local users to add new users o…